Hyper-V NDR Not Capturing Packets

Hi,

We have setup and NDR device on Hyper-V running on Windows 2019 Server, we used the documentation and the video in the Wiki to carry out the install.

All looks like it has setup correctly but we are not getting any packets being captured.and after a period of time the appliance shows as unhealthy in Sophos central.

Any pointers as to where to start?

Is there any further documentation that might help?

Thanks

Andy

Parents

0 LuCar Toni 9 months ago

You tried this guide? Sophos Appliance Support Guide v1

Is VLAN involved in your setup?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 LuCar Toni 9 months ago

You tried this guide? Sophos Appliance Support Guide v1

Is VLAN involved in your setup?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 andyhaigh 9 months ago in reply to LuCar Toni

The issue with packet capture was resolved by recreating the appliance. It seems on the first install it didn't download certain files to install but continued on anyway!

Yes, I have that guide.

Now we seem to be capturing data but Central is not reporting it, have a ticket open. Even the generate detection doesn't appear in Central.

The GUI we get on the Hyper-V appliance does not look like any of the documentation I see on the web, so would be good if that was updated.

Andy
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 andyhaigh 9 months ago in reply to andyhaigh

This is what we are seeing as the Appliance console in Hyper-V, which is very different to what is displayed in the how to intstall on Hyper-V video by John Limb below.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel